[Script] PHPBookmark - work in progress
cherub
SERnuke.com
I thought I'd have a play around with the ini files to try and get my head round the syntax and have come up with the following, targetting the PHPBookmark platform:
http://pastebin.com/ZQR0p3xw
I think its nearly there, but there are a few points that I'm not sure of.
1) how the captcha is extracted, looks like some sort of regex but Im not sure - checkcode=%captcha% src="data:;"
2) how the resulting password is extracted from the email
3) the whole verification system, I just commented it out
I will be looking at it again when Ive got time, but if anyone else wants to take a look feel free. There are plenty of targets out there, and it seems a pretty simple platform.
Cheers
http://pastebin.com/ZQR0p3xw
I think its nearly there, but there are a few points that I'm not sure of.
1) how the captcha is extracted, looks like some sort of regex but Im not sure - checkcode=%captcha% src="data:;"
2) how the resulting password is extracted from the email
3) the whole verification system, I just commented it out
I will be looking at it again when Ive got time, but if anyone else wants to take a look feel free. There are plenty of targets out there, and it seems a pretty simple platform.
Cheers
Comments
Nice to see people contribute here.
> 1) how the captcha is extracted, looks like some sort of regex but Im not sure
Just write %captcha% and the program will find it automatically. Just in case this is not working, use some kind of string that is part of the captcha-url like... %captcha% /captcha.php
> 2) how the resulting password is extracted from the email
in setup you have it setup like this...
[SETUP]
extract from email=password=email_pw
this will go to the email_pw section, extract things from emails according to its section and put the result in "password"
[email_pw]
type=extract
front=password:
back1=\n
back2=<
this takes a text (email) searches for "password:", cuts that away, and cuts things away at the end (new line and if present als all after the < sign).
>3) the whole verification system, I just commented it out
that really depends on the way a link can be detected. To complicated to write it up here.
cool
let me know if you run into problems